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Abstract:  We  explore  the  potential  of  high-speed  nanowire  superconducting  single-photon 
detectors  for  quantum  key  distribution  in  fiber,  over  long  distances  (at  1550  nm)  and  at  high  bit 
rates  (at  850  nm). 
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Single-photon  detectors  are  a  crucial  enabling  technology  in  Quantum  Key  Distribution  (QKD),  the  ultimate  in 
secure  communications  [1].  The  ideal  detector  for  this  application  would  have  high  speed,  zero  dark  counts,  and 
high  quantum  efficiency  at  the  wavelength  of  interest.  At  wavelengths  below  1000  nm  Silicon  Avalanche 
Photodiodes  (Si  APDs)  are  the  detector  of  choice  for  fiber-based  QKD  [2,3],  with  high  detection  efficiency  (~40  % 
at  850  nm)  and  low  dark  counts  (-100  Hz).  For  near-infrared  wavelengths  such  as  the  standard  telecommunication 
wavelengths  (1310  nm  and  1550  nm)  long  transmission  distances  (up  to  122  km)  have  been  achieved  through  use  of 
InGaAs  APDs  [4].  These  require  cooling  to  200  K,  offer  reduced  detection  efficiency  (20-30  %),  and  are  limited  to 
count  rates  of  -100  kHz.  Furthermore,  gating  is  essential  to  reduce  the  high  dark  count  rate.  Emerging 
superconducting  detector  technologies  hold  promise  for  QKD.  Impressive  transmission  distances  (29  dB  link  loss  - 
184  km)  have  recently  been  reported  using  high  detection  efficiency  Transition  Edge  Sensors  [5].  Nanowire-based 
superconducting  single-photon  detectors  (SSPDs),  pioneered  by  Gol’tsman  [6]  currently  have  moderately  low 
detection  efficiency  (20  %  in  the  visible)  and  finite  dark  counts,  but  are  extremely  fast  (jitter  well  below  100  ps, 
recovery  time  below  10  ns)  and  offer  single-photon  counting  at  very  high  rates  (approaching  1  GHz).  Their  single¬ 
photon  counting  capability  extends  well  beyond  telecommunications  wavelengths.  In  this  study  we  implement 
SSPDs  conveniently  packaged  in  a  cryogen-ffee  refrigerator  [7],  in  QKD  test  beds  at  850  nm  and  1550  nm. 

The  first  implementation  is  in  a  phase-encoding  QKD  scheme  using  the  BB84  protocol  at  1550  nm  [8].  The  test 
bed  operates  using  an  attenuated  laser  (mean  photon  number  per  pulse  jU  =  0.1)  at  a  clock  frequency  of  3.3  MHz. 
Interferometer  stability  is  maintained  via  a  feedback  mechanism.  Secret  bits  are  distilled  continuously  using 
BBSSS92  privacy  amplification  [9].  Twin  SSPDs  are  operated  at  the  receiver.  The  detection  efficiency  (inclusive  of 
coupling  losses)  is  0.9  %.  The  detectors  are  gated  for  a  4  ns  window  each  clock  cycle,  reducing  the  dark  count 
probability  to  4x10  ''  per  clock  period.  Results  are  shown  in  Fig.  1(a).  Sifted  key  transmission  rate  is  shown  as 
hollow  points;  the  distilled  secret  key  as  solid  points.  Transmission  loss  simulated  by  digital  attenuation  is  shown  as 
triangles;  actual  fiber  spools  (25  and  42  km)  are  the  solid  points.  In  this  demonstration,  secure  transmission  is 
achieved  over  12  dB  link  loss  (equivalent  to  -60  km  of  telecommunications  fiber).  At  low  link  loss,  the  main 
contribution  to  the  error  rate  (QBER)  is  the  modulation  error  of  the  interferometer  (below  1.5  %).  For  high  link  loss, 
the  dominating  QBER  contribution  is  detector  dark  counts.  Improving  the  detection  efficiency  [10]  and  narrowing 
the  gating  window  will  lead  to  improvements  in  range.  With  this  detector  (unlike  the  alternatives  [4,5])  there  is 
potential  to  increase  the  clock  rate  by  orders  of  magnitude,  leading  to  a  corresponding  improvement  in  secure 
transmission  rate. 

The  second  implementation  is  in  a  polarization-encoding  QKD  scheme  using  the  B92  protocol  at  850  nm  [3]. 
The  demonstration  was  carried  out  at  a  clock  frequency  625  MHz  using  attenuated  VCSELs.  QBER  and  sifted  rates 
were  measured  directly;  the  secret  rate  was  estimated  assuming  BBSSS92  privacy  amplification.  In  this  scheme  Si 
APDs  are  typically  used.  Si  APDs  offer  high  detection  efficiency  (40  %),  but  errors  arise  from  the  large  detector 
jitter  (400  ps  FWHM  with  an  asymmetric  tail).  This  intersymbol  interference  will  cause  counts  to  be  erroneously 
recorded  in  neighboring  clock  cycles.  At  850  nm,  the  SSPD  has  lower  detection  efficiency  (5  %)  than  the  Si  APD, 
but  significantly  lower  jitter  (68  ps  FWHM  with  a  Gaussian  profile)  [10].  A  histogram  of  counts  recoded  on  a  single 
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Figure  1(a)  QKD  at  1550  nm  with  SSPDs.  The  sifted  rate  the  hollow  points;  the  secret  rate  is  the  solid  points.  Points  where  link  loss  is 
simulated  by  attenuators  are  given  by  triangles;  squares  indicate  where  fiber  spools  are  used. 

Figure  1(b)  Comparison  of  detectors  under  consideration  for  QKD  at  850  nm.  Histogram  of  detection  events  on  a  single  detector  over  ~1  s 
with  a  retum-to-zero  repetitive  bit  sequence  at  625  MHz.  The  SSPD  trace  is  shown  in  red,  the  Si  APD  is  shown  in  blue. 


detector  channel  with  a  repetitive  return-to-zero  code  recorded  at  625  MHz  is  shown  in  Fig.  1(b)  -  note  counts  are 
displayed  on  a  logarithmic  scale.  With  any  increase  in  clock  frequency,  it  is  clear  that  in  the  case  of  the  Si  APD, 
even  when  bits  are  selected  from  a  limited  time  window  within  each  clock  period,  intersymbol  interference  will 
dominate  the  QBER  [2].  The  SSPD,  in  contrast  will  not  be  prey  to  this  effect  until  much  higher  clock  frequencies 
are  reached  (approaching  10  GHz)  and  hence  the  minimum  QBER  will  be  set  by  the  polarization  extinction.  QBER 
and  sifted  rates  were  measured  over  1  km  transmission  distance  at  //  =  0.1.  Using  the  Si  APD,  sifted  bits  were 
transmitted  at  2  MHz,  with  a  QBER  of  3.6  %;  using  the  SSPD,  sifted  bits  were  transmitted  at  1  MHz  with  a  QBER 
of  1  %  (set  by  the  polarization  extinction).  Because  a  larger  QBER  requires  a  larger  fraction  of  sifted  bits  must  be 
used  for  privacy  amplification  in  order  to  ensure  security,  the  projected  secure  key  transmission  rates  using  the  two 
detectors  are  very  similar  (900  kHz  for  the  Si  APD  and  830  kHz  for  the  SSPD).  For  the  SSPD,  further  increases  in 
system  clock  rate  will  lead  to  a  corresponding  increase  in  secure  rate;  for  the  Si  APD  this  is  not  true  due  to 
intersymbol  interference. 

In  summary,  we  show  that  nanowire  SSPDs  offer  many  advantages  for  fiber-based  QKD,  due  to  their  exquisite 
timing  resolution  and  low  dark  counts.  We  have  demonstrated  that  SSPDs  of  the  current  generation  are  competitive 
as  detectors  both  for  long  distance  and  high  bit  rate  fiber-based  QKD.  Dramatic  improvements  in  SSPD  detection 
efficiency  (up  to  57  %  at  1550  nm)  have  recently  been  reported  [11];  these  detectors  should  enable  further 
improvements  in  the  realm  of  QKD. 
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